CVE-2025-23199 - CVE House
Back to Database
Status published Medium CVE-2025-23199

Stored XSS-LibreNMS-Ports in librenms

Vulnerability Description

librenms is a community-based GPL-licensed network monitoring system. Affected versions are subject to a stored XSS on the parameter: `/ajax_form.php` -> param: descr. Librenms version up to 24.10.1 allow remote attackers to inject malicious scripts. When a user views or interacts with the page displaying the data, the malicious script executes immediately, leading to potential unauthorized actions or data exposure. This issue has been addressed in release version 24.11.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-23199

Credits & Attribution

No credits recorded in the NVD database.

References

More from librenms

View All →
CVE-2025-68614
LibreNMS Alert Rule API Cross-Site Scripting Vulnerability
Medium 4.3
CVE-2025-65093
LibreNMS is vulnerable to SQL Injection (Boolean-Based Blind) in hostname parameter in ajax_output.php endpoint
Medium 5.5
CVE-2025-65014
LibreNMS has Weak Password Policy
Low 3.7
CVE-2025-65013
LibreNMS vulnerable to Reflected Cross-Site Scripting (XSS) in endpoint `/maps/nodeimage` parameter `Image Name`
Medium 6.2
CVE-2025-62412
LibreNMS alert-rules Cross-Site Scripting Vulnerability
Low 3.8

Affected Vendor

Affected Software

librenms
Vulnerable Versions:
< 24.11.0

Timeline

Official Publish: January 16th, 2025
Last Modified: February 12th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

Weaknesses (CWE)

CWE-79

MITRE ATT&CK TTPs

T1189 Drive-by Compromise
Initial Access
T1059.007 JavaScript
Execution
T1539 Steal Web Session Cookie
Collection
T1213 Data from Information Repositories
Collection
T1567 Exfiltration Over Web Service
Exfiltration
T1491.001 Defacement
Impact